-- add icmp to masquerade rules

sapcc · Dec 11, 2017 · c97fcc3 · c97fcc3
1 parent ba5e5e6
commit c97fcc3
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/templates/node.go b/pkg/templates/node.go
@@ -180,6 +180,7 @@ storage:
           :POSTROUTING ACCEPT [0:0]
           -A POSTROUTING -p tcp ! -d {{ .ClusterCIDR }} -m addrtype ! --dst-type LOCAL -j MASQUERADE --to-ports 32000-65000
           -A POSTROUTING -p udp ! -d {{ .ClusterCIDR }} -m addrtype ! --dst-type LOCAL -j MASQUERADE --to-ports 32000-65000
+          -A POSTROUTING -p icmp ! -d {{ .ClusterCIDR }} -m addrtype ! --dst-type LOCAL -j MASQUERADE
           COMMIT
 
     - path: /etc/sysctl.d/10-enable-icmp-redirects